Projets/ObsiGate
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity
869 Commits 1 Branch 164 Tags
eff74cabe0498bbeb13d35aca456fcf8f6e69ccb
Commit Graph
6 Commits
Author SHA1 Message Date
bruno eff74cabe0 feat: #107 configuration - gestion des clés API & MCP (création/révocation, expiration 1j/1mois/6mois/1an/sans fin, une clé pour API REST + serveur MCP, dernière utilisation, store sans secret persisté; fix révocation longue durée) + script token MCP
CI / lint (push) Successful in 1m58s
Details
CI / security (push) Successful in 1m32s
Details
CI / test (push) Successful in 4m0s
Details
CI / build (push) Successful in 1m15s
Details
CI / e2e (push) Successful in 12m9s
Details
2026-09-22 14:48:51 -04:00
bruno 162a5b4acc fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034)
CI / lint (push) Successful in 1m20s
Details
CI / security (push) Successful in 47s
Details
CI / test (push) Successful in 2m21s
Details
CI / build (push) Successful in 43s
Details
CI / e2e (push) Successful in 10m48s
Details 
- sanitizer XSS serveur (markdown + page de partage) [BUG-021/022]
- rate-limit/lockout MFA [BUG-023]
- isolation vaults par segments [BUG-024]
- caps regex ReDoS [BUG-025]
- SSRF webhooks + secrets externalises [BUG-026]
- rotation/revocation des jetons [BUG-027]
- politique de mot de passe + invalidation sessions [BUG-028]
- verrous users.json [BUG-029]
- IP reelle dans les audits [BUG-030]
- rate-limit par compte [BUG-031]
- symlinks hors vault ignores [BUG-032]
- recherche simple via inverted index [BUG-033]
- token en memoire + cookie HttpOnly, CSP durcie [BUG-034]

Tests: pytest 961 passed / 6 skipped, ruff 0, mypy 0, frontend vert.
 2026-09-13 10:51:42 -04:00
bruno 1673531b43 fix: resolve all CI lint and security issues
CI / lint (push) Failing after 9s
Details
CI / test (push) Has been skipped
Details
CI / build (push) Has been skipped
Details
CI / e2e (push) Has been skipped
Details
CI / security (push) Failing after 12s
Details 
- ruff: 602→0 errors (428 auto-fixed, pyproject.toml ignores for FastAPI patterns)
- bandit: skip B310 (urllib for vault file access is intentional)
- Fixed SIM118 (dict.keys()→dict), PERF102, SIM113, SIM117
- Created pyproject.toml with ruff + bandit config
- 285 tests still pass
 2026-07-24 10:38:44 -04:00
bruno ed2bb4f7fb Add missing imports and clear backlink index 
Resolve build index regression causing stale backlink data on reindex.
 2026-05-26 10:35:22 -04:00
bruno 482937fb30 Add audit logging, rate limiting, secret redactor, and backlinks 
Implement several security and feature improvements across the backend
and frontend:
- New IP-based rate limiter for authentication endpoints
- New audit logging system for sensitive operations
- New secret redactor to mask sensitive patterns in rendered content
- Configurable token TTL and IGNORED_DIRS via environment variables
- Add backlink index and API endpoint
- Add preview tab support with single/double-click behavior in tree
- Add file backup before write/delete operations
 2026-05-26 10:27:00 -04:00
bruno 190f47f134 feat: Introduce a comprehensive authentication system, including user management, JWT handling, and initial frontend components with Docker support. 2026-03-23 15:44:37 -04:00